Parashift receives C5 certification – use of latest document AI in the cloud now possible for regulated companies in Germany

Alain Veuve | Founder & CEO Parashift

With the C5:2020 certification now in place, we have closed the last gap to enable regulated companies in Germany to use agentic document processing with the latest AI technologies.

——

Since day one, we at Parashift have believed that the cloud will be the future for almost every business application and that this move to the cloud will not stop at applications that handle highly sensitive data.

Admittedly, we thought it would be easier at first, but the requirements imposed by regulators and internal compliance and information security teams are extensive. Over the years, we have had to learn what mix of measures and infrastructure is needed to enable regulated companies such as insurance companies, banks, and healthcare providers to process their data at Parashift.

Highly secure intelligent document processing in the cloud

Our strategy for serving highly regulated companies, especially in Germany, is based on three main areas:

Sovereign Cloud Offering with T-Systems

Parashift customers can choose to have their data processed in a specific, country-dependent compliance zone. Since the beginning of the year, a German Sovereign Zone has been available in cooperation with T-Systems. This ensures that all requirements regarding data sovereignty, operational sovereignty, and software sovereignty are fully met. A Swiss zone has been in place since Parashift was launched. Further zones are in the pipeline and can be provided for almost any country as required.

Extensive certification regarding InfoSec

Parashift now has the relevant certifications regarding InfoSec and compliance. These are

• C5:2020
• ISO27001
• SOC2
• PCI-DSS

This greatly reduces the risk assessment effort for our new customers.

InfoSec-Features

A whole range of InfoSec features ensure comprehensive security:

• Proprietary training data format: Parashift uses the customer’s documents for processing and creates its own training data format that does not allow any conclusions to be drawn about the actual customer documents. This means that customer documents can be deleted immediately after processing without having to forego the learning gained from the processing for future training. The Parashift proprietary process also offers significant advantages, especially when compared to simple anonymization.

• Authentication: A variety of features such as SSO, 2FA, IP whitelisting, and more make authentication secure yet flexible.

• Encryption: Parashift naturally offers the highest level of data encryption, whether in transit or at rest.

Secure use of the latest AI technology

There is undoubtedly a lot of movement in the field of AI now. We have continuously developed new proprietary technologies, added Open-Source tech and presented new concepts in the field of document automation. We can quickly implement new concepts on our platform.

Today, we are working on combining our LLM, GNN-based document swarm learning, and OTL technology and making it available via MCP. The goal remains to create a system that requires almost no configuration or training. We are already there for many use cases, but further engineering is still needed for others, especially the more complex ones.

The configuration of use cases has already been largely converted to what is known as “conversational configuration.” We believe that this also offers great potential; instead of configuring the system according to fixed rules, we simply tell it what we need as output. This allows one use-case agent after another to be set up with relatively little effort.

All the latest AI technologies, whether classic AI models or GenAI/LLM components, are therefore operated in Parashift within a proven, certified, and audited security perimeter.

Cutting-edge AI technology is only available in the cloud

The dilemma for large companies in regulated industries when it comes to document AI is simple yet serious: business line managers want to use the latest AI technology for their automation, but compliance and information security managers would prefer to run every solution on-premise if possible. However, the latest, so-called “cutting-edge” technology can only be operated effectively in the cloud. Until now, regulated companies had a choice between two suboptimal options.

We can now add a third option to these two: the latest AI for agentic document automation, highly secure and comprehensively certified, available in the cloud. Large hospital chains, insurance companies, and banks are already making active use of this offering. They all send highly sensitive data daily and automate document processing using the latest AI. Simple, secure, certified.